[Security] limited the password length passed to encoders
updated CHANGELOG for 2.1.13
updated VERSION for 2.1.13